Hi there, In Persona/BrowserID, we're currently using DSA signatures (using a "DS128" value for "alg"). Would it be possible to get this into the current JWS/JWA drafts? We're currently looking at upgrading our formats to current JOSE draft, see here:
https://github.com/djc/id-specs/blob/prod/browserid/json-formats.md Relatedly, I was wondering if there's been discussion on including any non-NIST curves in JWA. With recent developments, it appears that the NIST curves may be a little suspect. http://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance http://cr.yp.to/talks/2013.05.31/slides-dan+tanja-20130531-4x3.pdf Instead, some of Bernstein et al.'s SafeCurves could be added: http://safecurves.cr.yp.to/ In particular, algorithms based on the 25519 curve already seems to be in fairly widespread use. Cheers, Dirkjan _______________________________________________ jose mailing list [email protected] https://www.ietf.org/mailman/listinfo/jose
